parse-server 2.8.4 → 8.6.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "parse-server",
-  "version": "2.8.4",
+  "version": "8.6.2",
   "description": "An express module providing a Parse-compatible API server",
   "main": "lib/index.js",
   "repository": {
@@ -13,84 +13,162 @@
     "public_html/",
     "views/",
     "LICENSE",
-    "PATENTS",
+    "NOTICE",
     "postinstall.js",
-    "README.md"
+    "README.md",
+    "types"
   ],
-  "license": "BSD-3-Clause",
+  "license": "Apache-2.0",
   "dependencies": {
-    "@parse/fs-files-adapter": "1.0.1",
-    "@parse/push-adapter": "3.0.0-alpha2",
-    "@parse/s3-files-adapter": "1.2.1",
-    "@parse/simple-mailgun-adapter": "1.0.2",
-    "bcryptjs": "2.4.3",
-    "body-parser": "1.18.3",
-    "commander": "2.16.0",
-    "deepcopy": "1.0.0",
-    "express": "4.16.2",
+    "@apollo/server": "4.12.1",
+    "@graphql-tools/merge": "9.0.24",
+    "@graphql-tools/schema": "10.0.23",
+    "@graphql-tools/utils": "10.8.6",
+    "@parse/fs-files-adapter": "3.0.0",
+    "@parse/push-adapter": "6.11.0",
+    "bcryptjs": "3.0.2",
+    "commander": "13.1.0",
+    "cors": "2.8.5",
+    "deepcopy": "2.1.0",
+    "express": "5.2.1",
+    "express-rate-limit": "7.5.1",
+    "follow-redirects": "1.15.9",
+    "graphql": "16.11.0",
+    "graphql-list-fields": "2.0.4",
+    "graphql-relay": "0.10.2",
+    "graphql-upload": "15.0.2",
     "intersect": "1.0.1",
-    "lodash": "4.17.5",
-    "lru-cache": "4.1.2",
-    "mime": "2.3.1",
-    "mongodb": "3.1.1",
-    "parse": "1.11.1",
-    "pg-promise": "8.4.5",
-    "redis": "2.8.0",
-    "request": "2.85.0",
-    "semver": "5.5.0",
+    "jsonwebtoken": "9.0.2",
+    "jwks-rsa": "3.2.0",
+    "ldapjs": "3.0.7",
+    "lodash": "4.17.21",
+    "lru-cache": "10.4.0",
+    "mime": "4.0.7",
+    "mongodb": "6.20.0",
+    "mustache": "4.2.0",
+    "otpauth": "9.4.0",
+    "parse": "7.1.2",
+    "path-to-regexp": "6.3.0",
+    "pg-monitor": "3.0.0",
+    "pg-promise": "12.2.0",
+    "pluralize": "8.0.0",
+    "punycode": "2.3.1",
+    "rate-limit-redis": "4.2.0",
+    "redis": "4.7.0",
+    "semver": "7.7.2",
+    "subscriptions-transport-ws": "0.11.0",
     "tv4": "1.3.0",
-    "uuid": "^3.1.0",
-    "winston": "2.4.1",
-    "winston-daily-rotate-file": "1.7.2",
-    "ws": "6.0.0"
+    "uuid": "11.1.0",
+    "winston": "3.17.0",
+    "winston-daily-rotate-file": "5.0.0",
+    "ws": "8.18.2"
   },
   "devDependencies": {
-    "babel-cli": "6.26.0",
-    "babel-core": "6.26.0",
-    "babel-eslint": "^8.2.2",
-    "babel-plugin-transform-flow-strip-types": "6.22.0",
-    "babel-plugin-transform-object-rest-spread": "^6.26.0",
-    "babel-preset-env": "1.6.1",
-    "bcrypt-nodejs": "0.0.3",
-    "cross-env": "5.2.0",
-    "deep-diff": "1.0.1",
-    "eslint": "^5.0.0",
-    "eslint-plugin-flowtype": "^2.39.1",
-    "flow-bin": "^0.76.0",
-    "gaze": "1.1.3",
-    "jasmine": "3.1.0",
-    "jasmine-spec-reporter": "^4.1.0",
-    "mongodb-runner": "4.0.0",
-    "nodemon": "1.18.1",
-    "nyc": "^12.0.2",
-    "request-promise": "4.2.2",
-    "supports-color": "^5.4.0"
+    "@actions/core": "1.11.1",
+    "@apollo/client": "3.13.8",
+    "@babel/cli": "7.27.0",
+    "@babel/core": "7.27.4",
+    "@babel/eslint-parser": "7.28.0",
+    "@babel/plugin-proposal-object-rest-spread": "7.20.7",
+    "@babel/plugin-transform-flow-strip-types": "7.26.5",
+    "@babel/preset-env": "7.27.2",
+    "@babel/preset-typescript": "7.27.1",
+    "@saithodev/semantic-release-backmerge": "4.0.1",
+    "@semantic-release/changelog": "6.0.3",
+    "@semantic-release/commit-analyzer": "13.0.1",
+    "@semantic-release/git": "10.0.1",
+    "@semantic-release/github": "11.0.2",
+    "@semantic-release/npm": "12.0.1",
+    "@semantic-release/release-notes-generator": "14.0.3",
+    "all-node-versions": "13.0.1",
+    "apollo-upload-client": "18.0.1",
+    "clean-jsdoc-theme": "4.3.0",
+    "cross-env": "7.0.3",
+    "deep-diff": "1.0.2",
+    "eslint": "9.27.0",
+    "eslint-plugin-expect-type": "0.6.2",
+    "eslint-plugin-unused-imports": "4.3.0",
+    "form-data": "4.0.4",
+    "globals": "16.2.0",
+    "graphql-tag": "2.12.6",
+    "jasmine": "5.7.1",
+    "jasmine-spec-reporter": "7.0.0",
+    "jsdoc": "4.0.4",
+    "jsdoc-babel": "0.5.0",
+    "lint-staged": "16.1.0",
+    "m": "1.9.1",
+    "madge": "8.0.0",
+    "mock-files-adapter": "file:spec/dependencies/mock-files-adapter",
+    "mock-mail-adapter": "file:spec/dependencies/mock-mail-adapter",
+    "mongodb-runner": "5.9.3",
+    "node-abort-controller": "3.1.1",
+    "node-fetch": "3.2.10",
+    "nyc": "17.1.0",
+    "prettier": "2.0.5",
+    "semantic-release": "24.2.5",
+    "typescript": "5.8.3",
+    "typescript-eslint": "8.33.1",
+    "yaml": "2.8.0"
   },
   "scripts": {
-    "dev": "npm run build && node bin/dev",
-    "lint": "flow && eslint --cache ./",
-    "build": "babel src/ -d lib/ --copy-files",
+    "ci:check": "node ./ci/ciCheck.js",
+    "ci:checkNodeEngine": "node ./ci/nodeEngineCheck.js",
+    "ci:definitionsCheck": "node ./ci/definitionsCheck.js",
+    "definitions": "node ./resources/buildConfigDefinitions.js && prettier --write 'src/Options/*.js'",
+    "docs": "jsdoc -c ./jsdoc-conf.json",
+    "lint": "eslint --cache ./ --flag unstable_config_lookup_from_file",
+    "lint-fix": "eslint --fix --cache ./ --flag unstable_config_lookup_from_file",
+    "build": "babel src/ -d lib/ --copy-files --extensions '.ts,.js'",
+    "build:types": "tsc",
     "watch": "babel --watch src/ -d lib/ --copy-files",
-    "pretest": "npm run lint",
-    "test": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=3.2.6} MONGODB_STORAGE_ENGINE=mmapv1 TESTING=1 jasmine",
-    "coverage": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=3.2.6} MONGODB_STORAGE_ENGINE=mmapv1 TESTING=1 nyc jasmine",
+    "watch:ts": "tsc --watch",
+    "test:mongodb:6.0.19": "MONGODB_VERSION=6.0.19 npm run test",
+    "test:mongodb:7.0.16": "MONGODB_VERSION=7.0.16 npm run test",
+    "test:mongodb:8.0.4": "MONGODB_VERSION=8.0.4 npm run test",
+    "test:postgres:testonly": "cross-env PARSE_SERVER_TEST_DB=postgres PARSE_SERVER_TEST_DATABASE_URI=postgres://postgres:password@localhost:5432/parse_server_postgres_adapter_test_database npm run testonly",
+    "testonly": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=8.0.4} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} TESTING=1 jasmine",
+    "test": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=8.0.4} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} mongodb-runner exec -t ${MONGODB_TOPOLOGY} --version ${MONGODB_VERSION} -- --port 27017 -- npm run testonly",
+    "test:types": "eslint types/tests.ts -c ./types/eslint.config.mjs",
+    "coverage:mongodb": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=8.0.4} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} mongodb-runner exec -t ${MONGODB_TOPOLOGY} --version ${MONGODB_VERSION} -- --port 27017 -- npm run coverage",
+    "coverage": "cross-env MONGODB_VERSION=${MONGODB_VERSION:=8.0.4} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} TESTING=1 nyc jasmine",
     "start": "node ./bin/parse-server",
+    "prettier": "prettier --write {src,spec}/{**/*,*}.js",
     "prepare": "npm run build",
-    "postinstall": "node -p 'require(\"./postinstall.js\")()'"
+    "postinstall": "node -p 'require(\"./postinstall.js\")()'",
+    "madge:circular": "node_modules/.bin/madge ./src --circular",
+    "benchmark": "cross-env MONGODB_VERSION=8.0.4 MONGODB_TOPOLOGY=standalone mongodb-runner exec -t standalone --version 8.0.4 -- --port 27017 -- npm run benchmark:only",
+    "benchmark:only": "node benchmark/performance.js",
+    "benchmark:quick": "cross-env BENCHMARK_ITERATIONS=10 npm run benchmark:only"
   },
+  "types": "types/index.d.ts",
   "engines": {
-    "node": ">= 8"
+    "node": ">=18.20.4 <19.0.0 || >=20.18.0 <21.0.0 || >=22.12.0 <23.0.0 || >=24.11.0 <25.0.0"
   },
   "bin": {
-    "parse-server": "./bin/parse-server"
+    "parse-server": "bin/parse-server"
   },
   "optionalDependencies": {
-    "bcrypt": "3.0.0",
-    "uws": "10.148.1"
+    "@node-rs/bcrypt": "1.10.7"
   },
   "collective": {
     "type": "opencollective",
     "url": "https://opencollective.com/parse-server",
     "logo": "https://opencollective.com/parse-server/logo.txt?reverse=true&variant=binary"
+  },
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/parse-server"
+  },
+  "husky": {
+    "hooks": {
+      "pre-commit": "lint-staged"
+    }
+  },
+  "lint-staged": {
+    "{src,spec}/{**/*,*}.js": [
+      "prettier --write",
+      "eslint --fix --cache",
+      "git add"
+    ]
   }
 }

package/postinstall.js

@@ -1,50 +1,38 @@
-const pkg = require('./package.json');
-
-const version = parseFloat(process.version.substr(1));
-const minimum = parseFloat(pkg.engines.node.match(/\d+/g).join('.'));
-
-module.exports = function () {
-  const openCollective = `
-                  1111111111
-               1111111111111111
-            1111111111111111111111
-          11111111111111111111111111
-        111111111111111       11111111
-       1111111111111             111111
-      1111111111111   111111111   111111
-      111111111111   11111111111   111111
-     1111111111111   11111111111   111111
-     1111111111111   1111111111    111111
-     1111111111111111111111111    1111111
-     11111111                    11111111
-      111111         1111111111111111111
-      11111   11111  111111111111111111
-       11111         11111111111111111
-        111111     111111111111111111
-          11111111111111111111111111
-            1111111111111111111111
-              111111111111111111
-                  11111111111
-
-
-        Thanks for installing parse 🙏
-  Please consider donating to our open collective
-      to help us maintain this package.
-
-  👉 https://opencollective.com/parse-server
-
-  `;
-  process.stdout.write(openCollective);
-  if (version >= minimum) {
-    process.exit(0);
-  }
-
-  const errorMessage = `
-    ⚠️  parse-server requires at least node@${minimum}!
-    You have node@${version}
-
-  `;
-
-  process.stdout.write(errorMessage);
-  process.exit(1);
-};
+const message = `
+                 1111111111
+              1111111111111111
+           1111111111111111111111
+         11111111111111111111111111
+       111111111111111       11111111
+      1111111111111     111     111111
+     1111111111111   111111111   111111
+     111111111111   11111111111   111111
+    1111111111111   11111111111   111111
+    1111111111111   1111111111    111111
+    1111111111111111111111111    1111111
+    11111111                    11111111
+     111111    111  1111111111111111111
+     11111   11111  111111111111111111
+      11111    1    11111111111111111
+       111111     111111111111111111
+         11111111111111111111111111
+           1111111111111111111111
+             111111111111111111
+                 11111111111
+ 
+    Thank you for using Parse Platform!
+         https://parseplatform.org
+ 
+Please consider donating to help us maintain
+                this package:
+
+👉 https://opencollective.com/parse-server 👈
+
+`;
+
+function main() {
+  process.stdout.write(message);
+  process.exit(0);
+}
+
+module.exports = main;

package/public_html/invalid_verification_link.html

@@ -47,8 +47,8 @@
     window.onload = addDataToForm;
 
     function addDataToForm() {
-      var username = getUrlParameter("username");
-      document.getElementById("usernameField").value = username;
+      const token = getUrlParameter("token");
+      document.getElementById("token").value = token;
 
       var appId = getUrlParameter("appId");
       document.getElementById("resendForm").action = '/apps/' + appId + '/resend_verification_email'
@@ -60,7 +60,7 @@
     <div class="container">
       <h1>Invalid Verification Link</h1>
         <form id="resendForm" method="POST" action="/resend_verification_email">
-          <input id="usernameField" class="form-control" name="username" type="hidden" value="">
+          <input id="token" class="form-control" name="token" type="hidden" value="">
           <button type="submit" class="btn btn-default">Resend Link</button>
         </form>
     </div> 

package/types/@types/@parse/fs-files-adapter/index.d.ts

@@ -0,0 +1,5 @@
+// TODO: Remove when @parse/fs-files-adapter is typed
+declare module '@parse/fs-files-adapter' {
+  const FileSystemAdapter: any;
+  export default FileSystemAdapter;
+}

package/types/@types/deepcopy/index.d.ts

@@ -0,0 +1,5 @@
+// TODO: Remove when https://github.com/sasaplus1/deepcopy.js/issues/278 is fixed
+declare type Customizer = (value: any, valueType: string) => unknown;
+declare type Options = Customizer | { customizer: Customizer };
+declare function deepcopy<T>(value: T, options?: Options): T;
+export default deepcopy;

package/types/LiveQuery/ParseLiveQueryServer.d.ts

@@ -0,0 +1,40 @@
+import { Auth } from '../Auth';
+declare class ParseLiveQueryServer {
+    server: any;
+    config: any;
+    clients: Map<string, any>;
+    subscriptions: Map<string, any>;
+    parseWebSocketServer: any;
+    keyPairs: any;
+    subscriber: any;
+    authCache: any;
+    cacheController: any;
+    constructor(server: any, config?: any, parseServerConfig?: any);
+    connect(): Promise<void>;
+    shutdown(): Promise<void>;
+    _createSubscribers(): void;
+    _inflateParseObject(message: any): void;
+    _onAfterDelete(message: any): Promise<void>;
+    _onAfterSave(message: any): Promise<void>;
+    _onConnect(parseWebsocket: any): void;
+    _matchesSubscription(parseObject: any, subscription: any): boolean;
+    _clearCachedRoles(userId: string): Promise<void>;
+    getAuthForSessionToken(sessionToken?: string): Promise<{
+        auth?: Auth;
+        userId?: string;
+    }>;
+    _matchesCLP(classLevelPermissions?: any, object?: any, client?: any, requestId?: number, op?: string): Promise<any>;
+    _filterSensitiveData(classLevelPermissions?: any, res?: any, client?: any, requestId?: number, op?: string, query?: any): Promise<void>;
+    _getCLPOperation(query: any): "get" | "find";
+    _verifyACL(acl: any, token: string): Promise<boolean>;
+    getAuthFromClient(client: any, requestId: number, sessionToken?: string): Promise<Auth>;
+    _checkWatchFields(client: any, requestId: any, message: any): any;
+    _matchesACL(acl: any, client: any, requestId: number): Promise<boolean>;
+    _handleConnect(parseWebsocket: any, request: any): Promise<any>;
+    _hasMasterKey(request: any, validKeyPairs: any): boolean;
+    _validateKeys(request: any, validKeyPairs: any): boolean;
+    _handleSubscribe(parseWebsocket: any, request: any): Promise<any>;
+    _handleUpdateSubscription(parseWebsocket: any, request: any): any;
+    _handleUnsubscribe(parseWebsocket: any, request: any, notifyClient?: boolean): any;
+}
+export { ParseLiveQueryServer };